Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/5E55C7C6ABE711F1AC4C05C5CE1D38B0.roa
File:                     5E55C7C6ABE711F1AC4C05C5CE1D38B0.roa (raw, json)
Hash identifier:          M8OhoCRyxezZkdhtLD8T2oEZ3sfrS8/jU8st2mVSqts=
Subject key identifier:   9A:5A:F7:D8:71:37:61:97:D2:21:78:9D:18:AB:EA:AF:CB:77:AE:F2
Certificate issuer:       /CN=F3678120AF/serialNumber=9433F1D5AFF2A4A3A484039CB04312FA4622D09F
Certificate serial:       08
Authority key identifier: 94:33:F1:D5:AF:F2:A4:A3:A4:84:03:9C:B0:43:12:FA:46:22:D0:9F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lDPx1a_ypKOkhAOcsEMS-kYi0J8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/5E55C7C6ABE711F1AC4C05C5CE1D38B0.roa
Signing time:             Wed 09 Sep 2026 00:42:44 +0000
ROA not before:           Wed 09 Sep 2026 00:00:40 +0000
ROA not after:            Sun 30 Sep 2029 00:00:40 +0000
asID:                     29606
IP address blocks:        102.202.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/lDPx1a_ypKOkhAOcsEMS-kYi0J8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/lDPx1a_ypKOkhAOcsEMS-kYi0J8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lDPx1a_ypKOkhAOcsEMS-kYi0J8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3678120AF, serialNumber=9433F1D5AFF2A4A3A484039CB04312FA4622D09F
        Validity
            Not Before: Sep  9 00:00:40 2026 GMT
            Not After : Sep 30 00:00:40 2029 GMT
        Subject: CN=6aa0ab84-1a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f0:57:63:8a:83:86:ec:98:e9:58:31:1e:7f:
                    5d:b2:b7:e1:b9:b1:f3:1d:52:60:71:15:f1:34:b1:
                    dc:38:b5:63:f8:a3:15:1a:73:59:0c:a5:10:8c:3e:
                    b5:35:90:25:03:8a:e0:23:d3:e1:6d:e8:ee:78:8b:
                    c7:28:27:45:6a:d8:51:41:06:bf:e1:c6:05:53:61:
                    d0:54:14:aa:d4:79:06:f2:29:9f:1f:3b:77:a4:c2:
                    87:64:e6:34:0d:72:ce:1c:3e:4d:88:f0:b7:e9:42:
                    72:ee:5a:d8:29:30:0c:5a:b3:7c:60:0b:0c:ca:54:
                    49:d9:e3:2c:a4:b9:66:00:8c:04:bb:48:7c:de:44:
                    89:2f:48:93:93:bf:82:11:f9:89:cf:ab:b9:96:af:
                    d1:eb:8f:de:29:bf:50:f1:7f:ff:58:9a:45:eb:a2:
                    76:d4:4a:aa:0e:85:8d:c1:9d:e0:e6:35:88:3b:22:
                    a7:68:4e:2c:97:f3:1b:75:13:f0:4e:34:6f:57:27:
                    51:fd:e8:41:6a:3c:b4:38:cf:fe:43:10:3e:29:40:
                    7d:ac:79:55:51:df:f4:6c:4f:34:b7:68:ae:87:27:
                    31:44:6c:c9:00:ff:98:38:99:3c:2a:47:df:a8:9c:
                    8c:c5:44:53:7d:a6:c5:75:d4:93:bc:6c:f8:a8:ee:
                    bb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:5A:F7:D8:71:37:61:97:D2:21:78:9D:18:AB:EA:AF:CB:77:AE:F2
            X509v3 Authority Key Identifier:
                keyid:94:33:F1:D5:AF:F2:A4:A3:A4:84:03:9C:B0:43:12:FA:46:22:D0:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/lDPx1a_ypKOkhAOcsEMS-kYi0J8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lDPx1a_ypKOkhAOcsEMS-kYi0J8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/5E55C7C6ABE711F1AC4C05C5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.202.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         da:97:fe:16:23:de:6b:13:6b:64:12:85:1c:66:10:f4:48:92:
         ac:c2:b0:70:d6:cb:11:26:f3:75:d3:45:83:67:36:aa:66:66:
         63:3b:9b:50:49:71:4b:c6:6f:97:86:f5:30:99:90:f2:f1:96:
         0f:73:67:3d:cf:23:42:c2:f3:5d:1a:14:16:12:df:52:5a:40:
         bc:e8:51:16:b5:60:5b:6f:8b:00:3f:23:e9:97:0b:0e:f0:19:
         56:48:7f:28:3d:0c:a7:c7:a9:50:53:4a:65:52:a9:6c:4b:25:
         99:1c:23:37:7b:79:c1:72:b3:d1:af:4e:47:e6:31:0c:e2:31:
         cc:50:6d:a6:16:85:75:27:d0:26:ef:a0:b2:b1:a0:3c:e5:8b:
         af:f8:e4:aa:72:38:b9:b5:19:d3:1b:d4:57:a4:f5:34:ff:98:
         ac:62:4d:10:8d:39:8d:28:3c:03:ab:19:47:f9:89:be:af:85:
         b7:58:62:51:68:92:79:6a:f8:c4:4e:c7:16:9a:36:10:26:27:
         7c:1c:13:1a:f8:29:33:e0:c2:7d:79:d0:0b:54:e2:1c:5e:af:
         ba:40:c6:46:ef:9a:c5:93:77:a7:86:0b:ba:2c:5b:5b:54:b8:
         80:89:e6:a2:e7:81:3e:ce:8e:fa:ab:f3:5a:e0:d9:a4:4d:47:
         70:93:a1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----